3 ms·
If you have completely sanitized data what is the problem with object serialization? Thank you.
by somebehemoth 9y ago
If you have completely sanitized data what is the problem with object serialization? Thank you.
- hdhzy 9y agoI think the problem lies somewhere inside "completely sanitized data"."If you have them completely sanitized it usually is not what many would call object serialization (php unserialize) but rather a data format (JSON).
- throwanem 9y agoThe only reliable way to sanitize PHP-serialized data is to unserialize it, scrub it, and reserialize it. This poses a nigh intractable chicken-egg problem, and makes a switch to JSON by far a more economical option.